Pervasive Technology Labs at Indiana University Advanced Networking Management Lab (ANML)
Distributed Denial of Service Attacks(DDoS) Resources
DDoS Case Online

Attacks Against GRC.COM

DoS Attack on a Check Point Firewall

Technical Information

SANS' DDoS Roadmap

CERT's DoS FAQ

Dave Dittrichs' Homepage

DDoS Attacks/tools

CIAC

Astanetworks

DDoS History in Brief


"Traditional" DoS attacks, however, typically generate a large amount of traffic from a given host or subnet and it is possible for a site to detect such an attack in progress and defend themselves. Distributed DoS attacks are a much more nefarious extension of DoS attacks because they are designed as a coordinated attack from many sources simultaneously against one or more targets.

Denial-of-service attacks under a number of guises have been around for decades. Distributed DoS attacks are much newer, first being seen in late June and early July of 1999. The first well-documented DDoS attack appears to have occurred in August 1999, when a DDoS tool called Trinoo (described below) was deployed in at least 227 systems, of which at least 114 were on Internet2, to flood a single University of Minnesota computer; this system was knocked off the air for more than two days.

Some statistics are available for these attacks' experience. Keynote reports the following degradation of performance:
Internet Performance Indicators
Available from http://www.keynote.com/news/announcements/pr021200attacks.html
Date Web Site Benchmark
Time of First Trouble Return to Reasonable Service
Speed (in Seconds) Availability Time of Day Speed (seconds) Availability
Feb 7 Yahoo! 1.71 98.5% 10:15 14:45 1.08 98.5%
Feb 8 Buy.com 9.15 96.9% 10:00 15:00 5.71 87.9%
eBay 6.04 98.5% 14:30 19:30 29.70 88.7%
CNN 6.12 96.9% 16:00 20:15 8.60 98.4%
Amazon.com 5.11 98.5% 17:00 20:45 7.71 80.0%
Feb 9 ZDNet 4.19 98.5% 04:00 07:30 7.21 95.4%
E*Trade 2.31 98.5% 05:00 08:45 6.16 98.4%
Excite 3.54 98.5% 18:45 21:00 2.75 98.4%



Page developed by yinjin@indiana.edu

107 S. Indiana Ave., Bloomington, IN 47405-7000 (812) 855-4810

Comments: ptlabs@iu.edu
© 2001, The Trustees of Indiana University
Pervasive Technology Labs at Indiana University